Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa
File: 3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa (raw, json)
Hash identifier: vBaNYAz81NKIbnxKbhAFP/naPuuduxJ3px9297skses=
Subject key identifier: 29:BB:40:F8:C7:22:12:E7:AD:84:D2:46:61:E4:00:DA:F4:46:E6:15
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F432858496A19B0C44A8DC683EF9E1400
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa
Signing time: Fri 04 Apr 2025 13:00:59 +0000
ROA not before: Fri 04 Apr 2025 13:00:59 +0000
ROA not after: Thu 03 Jul 2025 13:00:59 +0000
asID: 8069
IP address blocks: 20.157.178.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:6a:19:b0:c4:4a:8d:c6:83:ef:9e:14:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Apr 4 13:00:59 2025 GMT
Not After : Jul 3 13:00:59 2025 GMT
Subject: CN=45706d8e-b9fd-4d47-a5c4-47ae0e5ab7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:5b:c2:ac:15:e3:c8:a4:ce:c7:48:9b:24:
22:b1:b0:19:6a:8c:a1:fe:6f:93:4e:be:f0:21:ce:
bc:06:8a:04:5f:c9:d5:9c:6e:37:93:9f:52:cb:29:
88:4b:19:3e:86:c9:da:b1:57:f4:83:96:00:3d:93:
0b:cf:71:89:38:96:52:71:07:10:0b:c0:25:ed:0c:
86:08:82:22:fe:d7:b0:04:d6:40:9e:80:3d:66:d9:
23:fd:c0:5c:22:9b:c7:64:6a:eb:e5:62:7c:5d:fb:
91:30:b3:5d:c4:74:62:54:42:c1:fd:c2:f7:8d:a1:
47:c0:89:09:5a:ca:3f:f8:ac:18:23:cd:bc:d7:cd:
27:38:48:12:ed:51:2b:f5:a7:d6:3c:c7:6a:ac:68:
a6:79:76:4d:5c:9b:e7:81:88:88:91:cf:fc:1e:4c:
d8:7f:7a:49:65:fc:d7:ae:24:8f:23:a4:2f:39:e1:
df:b1:ca:d9:05:74:38:39:74:4f:2c:e9:3b:5e:37:
3d:4d:ba:d6:d6:66:4a:e7:6c:0b:86:c7:4e:76:37:
cb:89:01:ad:dd:fd:48:26:0d:06:95:73:34:9c:98:
cc:28:37:80:c5:b2:18:d7:0a:fa:13:af:25:c6:45:
4e:7a:7d:48:43:a7:c7:66:7d:c6:01:99:51:3f:41:
3f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:40:F8:C7:22:12:E7:AD:84:D2:46:61:E4:00:DA:F4:46:E6:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/3b5b3fdc-610d-3634-aa1a-6f5752624bda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
20.157.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:be:e2:75:54:2b:4c:ff:da:70:07:a3:92:96:8a:7a:72:02:
1c:4e:29:e3:1c:67:5a:aa:8b:e7:a4:29:bd:dd:46:a5:b8:82:
17:90:6f:93:57:83:23:47:bd:bf:f0:c7:8e:63:f6:1c:c6:3d:
cc:8a:7a:ee:64:75:1b:ec:41:5b:c1:90:6d:c4:65:0c:54:61:
8c:32:19:00:11:f4:ab:59:06:fb:7a:98:20:29:7b:09:da:21:
e5:65:40:0e:5f:24:f9:4f:ea:01:a2:65:1c:81:71:9b:43:d2:
bc:fd:43:1f:dc:c3:a8:7e:eb:04:4d:23:19:a5:b7:c6:7e:2c:
e6:27:23:57:9a:dd:9d:bb:f9:aa:43:aa:62:8d:c0:63:e7:bd:
7d:34:38:53:ad:d1:a8:2a:ab:53:68:08:0a:c5:15:09:84:05:
ac:3a:d7:d0:0e:e1:a8:b7:39:19:64:5e:22:b2:ee:74:63:48:
cd:be:f9:80:58:ca:98:66:d2:65:94:40:16:e1:bf:02:3c:c5:
ff:39:23:d2:b1:38:e3:8c:61:e1:4d:3e:57:3c:91:4a:3d:3b:
96:a5:57:f0:6c:fd:8b:ef:0c:dc:72:34:3c:29:d3:ac:7b:ea:
7b:d3:c0:c6:92:5c:98:88:21:9b:18:1c:b6:eb:29:f0:c8:c2:
2c:34:96:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGbDESo3Gg++eFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1
ZWVhMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
NDU3MDZkOGUtYjlmZC00ZDQ3LWE1YzQtNDdhZTBlNWFiN2IyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM1bwqwV48ikzsdImyQisbAZaoyh/m+TTr7w
Ic68BooEX8nVnG43k59SyymISxk+hsnasVf0g5YAPZMLz3GJOJZScQcQC8Al7QyG
CIIi/tewBNZAnoA9Ztkj/cBcIpvHZGrr5WJ8XfuRMLNdxHRiVELB/cL3jaFHwIkJ
Wso/+KwYI828180nOEgS7VEr9afWPMdqrGimeXZNXJvngYiIkc/8HkzYf3pJZfzX
riSPI6QvOeHfscrZBXQ4OXRPLOk7Xjc9TbrW1mZK52wLhsdOdjfLiQGt3f1IJg0G
lXM0nJjMKDeAxbIY1wr6E68lxkVOen1IQ6fHZn3GAZlRP0E/ewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCm7QPjHIhLnrYTSRmHkANr0RuYVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy
ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvM2I1YjNmZGMtNjEwZC0z
NjM0LWFhMWEtNmY1NzUyNjI0YmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky
M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl
NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz
ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFJ2yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADu+4nVUK0z/2nAHo5KWinpyAhxOKeMcZ1qqi+ekKb3dRqW4gheQb5NX
gyNHvb/wx45j9hzGPcyKeu5kdRvsQVvBkG3EZQxUYYwyGQAR9KtZBvt6mCApewna
IeVlQA5fJPlP6gGiZRyBcZtD0rz9Qx/cw6h+6wRNIxmlt8Z+LOYnI1ea3Z27+apD
qmKNwGPnvX00OFOt0agqq1NoCArFFQmEBaw619AO4ai3ORlkXiKy7nRjSM2++YBY
yphm0mWUQBbhvwI8xf85I9KxOOOMYeFNPlc8kUo9O5alV/Bs/YvvDNxyNDwp06x7
6nvTwMaSXJiIIZsYHLbrKfDIwiw0lqg=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:17 2025 by rpki-client on console.sobornost.net